Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: XNYOhcB3EHHMXpOK85gYGiKuCLL+nCp3NnCEFCCPEq4=
Subject key identifier: 37:12:E9:34:FE:C8:5F:05:2C:49:F3:E4:8F:31:95:E2:9F:BF:EC:E2
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019CFBE2C8325CCE895BE5FBFBDB422BA3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 1872
Signing time: Tue 17 Mar 2026 13:01:09 +0000
Manifest this update: Tue 17 Mar 2026 13:01:09 +0000
Manifest next update: Wed 18 Mar 2026 13:01:09 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: t+vDsAOHXOOYw4OYym9W1z8eTGHtUb9jbBg2mrciT8A=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:e2:c8:32:5c:ce:89:5b:e5:fb:fb:db:42:2b:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Mar 17 13:01:09 2026 GMT
Not After : Mar 18 13:01:09 2026 GMT
Subject: CN=3712e934fec85f052c49f3e48f3195e29fbfece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:5f:50:2d:ae:17:f2:15:4b:2e:85:65:5e:
dd:b2:d6:6a:e9:a5:75:54:94:52:21:ad:d9:90:4c:
ca:5f:8a:62:7c:8e:9d:f5:4e:2e:92:a8:55:3a:71:
80:6f:02:e7:78:a7:bc:b0:92:c4:42:85:f5:05:aa:
09:f6:0d:59:cd:b4:fa:6c:37:34:0a:bf:cb:1f:a9:
20:a6:8e:80:c6:42:46:8c:ec:26:9b:6c:e1:9e:9d:
2a:3e:93:f4:d6:3c:47:4c:63:e8:4b:e5:cc:ee:ed:
5b:d4:5a:76:67:f5:f0:4a:29:1a:ae:c9:d6:a3:e2:
a9:a9:b9:b3:05:1e:c4:95:28:c6:0f:2a:e1:01:6d:
6a:62:60:0c:3b:1e:f9:d7:0b:fd:87:fb:38:1a:55:
6b:ff:f1:7a:b4:40:85:ba:c1:32:a1:d4:f3:19:86:
80:a1:af:e1:d5:6a:57:35:b5:82:e4:9f:97:8a:11:
89:54:32:25:09:65:44:31:07:9f:38:dd:dc:2d:79:
5e:1c:35:92:d9:cf:d1:d0:72:1a:f6:b0:55:42:b7:
fd:93:6d:90:44:bd:52:72:98:a7:13:af:a7:f9:f2:
20:22:9b:23:ee:8b:ba:20:b7:82:48:32:3d:fa:5a:
6f:78:80:65:96:27:af:71:5e:26:bb:cb:0d:16:a7:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:E9:34:FE:C8:5F:05:2C:49:F3:E4:8F:31:95:E2:9F:BF:EC:E2
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:b8:d3:64:b0:f4:21:26:0e:70:c1:15:48:46:70:64:32:
9b:e9:81:b1:ab:9b:9e:9f:52:5b:b2:63:97:38:f3:fb:76:35:
e6:26:f8:be:45:c4:c3:ea:46:77:43:09:fa:c4:25:65:ef:71:
ad:e8:aa:d0:aa:c2:33:0d:6c:5c:d9:c7:c4:1f:de:ba:7d:58:
2f:97:a0:32:15:85:7b:13:84:4b:e3:da:93:14:46:1f:ab:e9:
51:15:d7:39:04:02:98:f6:d2:f7:88:bc:18:7c:89:dc:63:8f:
e8:f8:bb:75:9a:45:a3:c8:59:8c:26:28:18:fe:66:a0:a0:83:
6b:2c:b2:3d:b3:eb:b0:83:60:da:e8:b5:50:68:12:57:f4:9a:
3b:16:f8:43:f4:f8:9d:58:78:b4:cf:c1:34:4a:62:7f:e9:69:
a6:48:77:ab:16:30:89:5c:ce:f7:7f:7d:94:6c:66:77:74:37:
f1:24:8c:07:02:b0:ba:5d:0d:b6:5a:e1:2f:5e:e5:cc:3c:ef:
b0:dc:cc:78:04:64:8e:b3:77:3a:b6:d1:58:6f:6b:26:20:6c:
08:2b:b8:72:2e:94:b9:fb:56:ec:68:e0:0e:c8:8c:ca:38:cf:
b6:b8:00:34:ae:fc:37:93:05:64:ae:26:3b:b7:c5:ca:32:d3:
3b:51:77:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz74sgyXM6JW+X7+9tCK6PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjYwMzE3MTMwMTA5WhcNMjYwMzE4MTMwMTA5WjAzMTEwLwYDVQQD
EygzNzEyZTkzNGZlYzg1ZjA1MmM0OWYzZTQ4ZjMxOTVlMjlmYmZlY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3NfUC2uF/IVSy6FZV7dstZq6aV1
VJRSIa3ZkEzKX4pifI6d9U4ukqhVOnGAbwLneKe8sJLEQoX1BaoJ9g1ZzbT6bDc0
Cr/LH6kgpo6AxkJGjOwmm2zhnp0qPpP01jxHTGPoS+XM7u1b1Fp2Z/XwSikarsnW
o+KpqbmzBR7ElSjGDyrhAW1qYmAMOx751wv9h/s4GlVr//F6tECFusEyodTzGYaA
oa/h1WpXNbWC5J+XihGJVDIlCWVEMQefON3cLXleHDWS2c/R0HIa9rBVQrf9k22Q
RL1ScpinE6+n+fIgIpsj7ou6ILeCSDI9+lpveIBllievcV4mu8sNFqchcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcS6TT+yF8FLEnz5I8xleKfv+ziMB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjK402Sw
9CEmDnDBFUhGcGQym+mBsaubnp9SW7Jjlzjz+3Y15ib4vkXEw+pGd0MJ+sQlZe9x
reiq0KrCMw1sXNnHxB/eun1YL5egMhWFexOES+PakxRGH6vpURXXOQQCmPbS94i8
GHyJ3GOP6Pi7dZpFo8hZjCYoGP5moKCDayyyPbPrsINg2ui1UGgSV/SaOxb4Q/T4
nVh4tM/BNEpif+lppkh3qxYwiVzO9399lGxmd3Q38SSMBwKwul0NtlrhL17lzDzv
sNzMeARkjrN3OrbRWG9rJiBsCCu4ci6UuftW7GjgDsiMyjjPtrgANK78N5MFZK4m
O7fFyjLTO1F3TA==
-----END CERTIFICATE-----
Generated at Tue Mar 17 15:25:21 2026 by rpki-client